Untitled

<?php require_once('Connections/con1.php'); ?>
<?php

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_POST["MM_update"])) && ($_POST["MM_update"] == "form1")) {
  $updateSQL = sprintf("UPDATE Tracking  SET SendersName=%s, SendersAddress=%s, ReceiversName=%s, ReceiversAddress=%s, DateofDespatch=%s, CurrentLocation=%s, DateofArrival=%s, Destination=%s, Parcel_Type=%s WHERE TrackingNumber=%s",
                       GetSQLValueString($_POST['SendersName'], "text"),
                       GetSQLValueString($_POST['SendersAddress'], "text"),
                       GetSQLValueString($_POST['ReceiversName'], "text"),
                       GetSQLValueString($_POST['ReceiversAddress'], "text"),
                       GetSQLValueString($_POST['DateofDespatch'], "text"),
                       GetSQLValueString($_POST['CurrentLocation'], "text"),
                       GetSQLValueString($_POST['DateofArrival'], "text"),
                       GetSQLValueString($_POST['Destination'], "text"),
                       GetSQLValueString($_POST['ParcelType'], "text"));

  mysql_select_db($database_con1, $con1);
  $Result1 = mysql_query($updateSQL, $con1) or die(mysql_error());

  $updateGoTo = "Update_Successful.php";
  if (isset($_SERVER['QUERY_STRING'])) {
    $updateGoTo .= (strpos($updateGoTo, '?')) ? "&" : "?";
    $updateGoTo .= $_SERVER['QUERY_STRING'];
  }
  header(sprintf("Location: %s", $updateGoTo));
}

$colname_Recordset1 = "-1";
if (isset($_POST['TrackingNumber'])) {
  $colname_Recordset1 = (get_magic_quotes_gpc()) ? $_POST['TrackingNumber'] : addslashes($_POST['TrackingNumber']);
}
mysql_select_db($database_con1, $con1);
$query_Recordset1 = sprintf("SELECT * FROM Tracking WHERE TrackingNumber = '%s'", $colname_Recordset1);
$Recordset1 = mysql_query($query_Recordset1, $con1) or die(mysql_error());
$row_Recordset1 = mysql_fetch_assoc($Recordset1);
$totalRows_Recordset1 = mysql_num_rows($Recordset1);
?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Parcel Display</title>
<style type="text/css">
<!--
#Layer1 {
    position:absolute;
    left:343px;
    top:26px;
    width:624px;
    height:414px;
    z-index:1;
}
.style1 {
    font-size: 36px;
    font-weight: bold;
}
.style2 {font-size: 18px}
.style3 {
    font-size: 24px;
    font-weight: bold;
    font-style: italic;
}
body {
    color: #c0392b;
}
body,td,th {
    color: #009;
}
-->
</style>
</head>  <body bgcolor="#c0392b">
<?php if (   empty ( $row_Recordset1 )  {
echo '<div> You entered wrong Tracking  number please try again .  </div>' ;
?>
<div id="Layer1">
  <table width="599" height="401" border="1">
    <tr>
      <td colspan="2" bgcolor="#FF0000"><div align="center" class="style1">Parcel Receivers Information Details </div></td>
    </tr>
    <tr>
      <td width="223" bgcolor="#FFFFCC"><strong><span class="style2">Sender's Name: </span></strong></td>
      <td width="360" bgcolor="#FFFFCC">        <input name="SendersName" type="text" id="SendersName" value="<?php echo $row_Recordset1['SendersName']; ?>" size="50" readonly="true" />      </td>
    </tr>
    <tr>
      <td bgcolor="#FFFFCC"><strong><span class="style2">Sender's Address: </span></strong></td>
      <td bgcolor="#FFFFCC">        <textarea name="SendersAddress" cols="50" rows="" readonly="readonly" id="SendersAddress"><?php echo $row_Recordset1['SendersAddress']; ?></textarea>      </td>
    </tr>
    <tr>
      <td bgcolor="#FFFFCC"><strong><span class="style2">Receiver's Name: </span></strong></td>
      <td bgcolor="#FFFFCC">        <input name="ReceiversName" type="text" id="ReceiversName" value="<?php echo $row_Recordset1['ReceiversName']; ?>" size="50" readonly="true" />      </td>
    </tr>
    <tr>
      <td bgcolor="#FFFFCC"><strong><span class="style2">Receiver's Address: </span></strong></td>
      <td bgcolor="#FFFFCC">        <textarea name="ReceiversAddress" cols="50" rows="" readonly="readonly" id="ReceiversAddress"><?php echo $row_Recordset1['ReceiversAddress']; ?></textarea>      </td>
    </tr>
    <tr>
      <td bgcolor="#FFFFCC"><strong><span class="style2">Date of Despatch: </span></strong></td>
      <td bgcolor="#FFFFCC">        <input name="DateofDespatch" type="text" id="DateofDespatch" value="<?php echo $row_Recordset1['DateofDespatch']; ?>" size="10" readonly="true" />      </td>
    </tr>
    <tr>
      <td bgcolor="#FFFFCC"><strong><span class="style2">Current Location: </span></strong></td>
      <td bgcolor="#FFFFCC">        <input name="CurrentLocation" type="text" id="CurrentLocation" value="<?php echo $row_Recordset1['CurrentLocation']; ?>" size="50" readonly="true" />      </td>
    </tr>
    <tr>
      <td bgcolor="#FFFFCC"><strong><span class="style2">Date of Arrival: </span></strong></td>
      <td bgcolor="#FFFFCC">        <input name="DateofArrival" type="text" id="DateofArrival" value="<?php echo $row_Recordset1['DateofArrival']; ?>" size="10" readonly="true" />      </td>
    </tr>
    <tr>
      <td bgcolor="#FFFFCC"><strong><span class="style2">Destination:</span></strong></td>
      <td bgcolor="#FFFFCC">        <input name="Destination" type="text" id="Destination" value="<?php echo $row_Recordset1['Destination']; ?>" size="50" readonly="true" />      </td>
    </tr>
    <tr>
      <td bgcolor="#FFFFCC"><strong><span class="style2">Parcel Type: </span></strong></td>
      <td bgcolor="#FFFFCC">        <input name="ParcelType" type="text" id="ParcelType" value="<?php echo $row_Recordset1['ParcelType']; ?>" size="50" readonly="true" />      </td>
    </tr>

    <tr>
      <td bgcolor="#FFFFCC">&nbsp;</td>
      <td bgcolor="#FFFFCC">&nbsp;</td>
    </tr>
  </table>
</div>

<?php  } ?>

<form action="SearchTrack.php" method="post" name="form1" target="_self" id="form1">
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p align="center">
    <input type="hidden" name="MM_update" value="form1" />
    <a href="SearchTrack.php" target="_self" class="style3">Back</a></p>
</form>
</body>
</html>
<?php
mysql_free_result($Recordset1);
?>